Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146008.roa
File: AS146008.roa (raw, json)
Hash identifier: LiUV/m/qOYrjLGLLdQbnXe8lbEhCAn8l5lwcROY61Vw=
Subject key identifier: 36:48:65:44:EE:AA:9A:89:3E:3E:25:A1:1C:62:15:5E:97:6D:58:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BC365634E2AD4EAACB8C4583110EC0AD9ED07A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146008.roa
Signing time: Fri 22 May 2026 01:50:20 +0000
ROA not before: Fri 22 May 2026 01:45:20 +0000
ROA not after: Fri 21 May 2027 01:50:20 +0000
asID: 146008
IP address blocks: 240a:ad1e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c3:65:63:4e:2a:d4:ea:ac:b8:c4:58:31:10:ec:0a:d9:ed:07:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:20 2026 GMT
Not After : May 21 01:50:20 2027 GMT
Subject: CN=36486544EEAA9A893E3E25A11C62155E976D5873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:e4:f2:0d:67:3d:e2:90:b6:f2:ed:85:6e:
dd:b1:2c:77:31:29:71:31:0d:8e:ba:3d:ab:0d:6c:
b2:c0:6f:89:70:ed:de:d1:7a:b1:74:ed:22:41:f0:
59:a2:0f:c1:d1:e6:3d:61:32:ca:6e:f6:36:8c:e4:
0c:47:99:40:87:78:95:26:14:72:a5:4f:aa:d9:2c:
2e:53:0b:ad:89:fb:bc:70:a2:01:0b:1c:98:32:f6:
08:3f:e1:46:6b:09:f0:9a:6f:3b:54:c3:32:5c:72:
2a:7e:0c:bb:e3:f5:98:00:e1:5d:16:b2:a7:96:ce:
d4:32:4a:61:86:26:4b:3e:0d:18:6c:2b:19:2e:6c:
82:48:b0:41:5a:38:85:ff:66:20:23:25:28:41:61:
77:e5:46:af:79:bd:b9:a4:ab:4d:b9:6d:8b:c5:8a:
06:7a:c4:ae:36:19:92:9d:9d:53:b6:7d:d7:41:57:
95:fc:33:94:ce:4b:e5:df:a7:c6:ef:ad:88:46:d9:
96:13:90:f0:a6:0a:50:38:b8:f0:91:e2:aa:65:29:
81:84:21:56:d1:67:ad:78:0b:3a:37:38:c4:5e:05:
c2:66:52:d0:1f:4a:d2:22:f9:e6:46:9f:dd:c3:91:
c8:0f:89:f4:0a:2d:48:a0:6e:70:2d:b2:ca:3a:56:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:65:44:EE:AA:9A:89:3E:3E:25:A1:1C:62:15:5E:97:6D:58:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad1e::/32
Signature Algorithm: sha256WithRSAEncryption
63:58:e4:73:68:35:d4:4e:01:3c:00:68:3c:72:1e:02:88:d4:
86:7f:c2:37:d7:8d:ca:64:a9:ab:86:00:9b:63:1b:08:d4:99:
11:8c:06:7f:79:78:09:23:87:b6:01:e0:d1:88:74:01:11:3a:
16:86:1c:e6:e0:a1:a7:fb:f9:0b:a1:d3:cf:dc:b6:e3:1d:4c:
fe:28:c2:7f:d4:4d:45:81:f1:b3:99:cf:52:4e:f8:8b:a4:7a:
70:b4:c0:4c:02:c4:ca:f7:00:86:26:28:00:03:dd:86:87:0b:
a1:47:35:e8:a4:7c:79:7f:dd:aa:26:17:87:a5:1e:5b:de:0b:
32:b9:24:b2:d9:6d:a6:3a:d6:83:ae:31:d7:9f:32:a5:db:64:
80:c3:10:a6:d0:92:50:db:18:f7:a5:c0:68:33:55:d9:1d:b4:
1e:0a:23:d9:4b:1c:25:5c:ee:fe:48:af:a1:68:df:87:49:da:
a2:3b:81:bb:a7:1b:93:05:e2:99:33:bf:60:a2:c9:6b:8c:11:
0c:88:4e:a9:50:e6:5c:fe:96:d6:5c:0a:88:66:ff:a3:e3:f7:
a3:1c:7e:5c:b8:f4:58:fc:06:72:26:a3:f2:a2:0f:b7:c4:71:
eb:93:16:a3:24:01:e3:6f:9b:ae:c8:af:ef:5e:5a:f0:05:8f:
39:6f:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client